Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft
File:                     9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft (raw, json)
Hash identifier:          DGG6nXHuGzYZ8K2DGp9OoHuCpBY33Bca9aTDTStViZM=
Subject key identifier:   CD:00:91:75:6C:C6:1F:A9:F9:88:5A:36:A0:51:D4:D8:AE:79:06:62
Authority key identifier: 9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC
Certificate issuer:       /CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
Certificate serial:       6755A2D2C1062860C0FED2EA285572C8BBEFFA93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft
Manifest number:          E3
Signing time:             Fri 28 Mar 2025 17:07:51 +0000
Manifest this update:     Fri 28 Mar 2025 17:02:51 +0000
Manifest next update:     Sat 29 Mar 2025 19:40:51 +0000
Files and hashes:         1: 323830343a326437303a3330303a3a2f34312d3431203d3e20323635323832.roa (hash: dVARaFVMdMdHQ6Bld5pZ0sktZQcdpKzswuC/8qU7v78=)
                          2: 3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa (hash: PBAVWDEZ/8URUjnI7xWp37tBWzT+HtUN4BzJA9/c93Q=)
                          3: 323830343a326437303a3a2f33322d3332203d3e20323635323832.roa (hash: nmoDArWRO0uLHbSAC4h2F96tm5C0wVkRpDyqnAkDCMY=)
                          4: 323830343a326437303a38303a3a2f34312d3431203d3e20323635323832.roa (hash: eBtsdDY81NfMBsgLEmJXeXJKkUKD+uNzTdp7rZYUx2M=)
                          5: 323830343a326437303a3338303a3a2f34312d3431203d3e20323635323832.roa (hash: NM19uogG2PQ1sn58KH5mCEVUZEoPYPuLaMBp+sUjB10=)
                          6: 323830343a326437303a3130303a3a2f34312d3431203d3e20323635323832.roa (hash: hmMHHeJRSGr82SwNrmmok2/PX4gWJw42ZTyIOtk7OEA=)
                          7: 9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl (hash: v9j0RWsUkYmO8TSjh0Rm5dKPUexjLOW9i6t6OoowkJA=)
                          8: 323830343a326437303a3238303a3a2f34312d3431203d3e20323635323832.roa (hash: aKfiWJVrKweBQK/uEfhoatdC1VlCcAmXFAwmXZnxZic=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:55:a2:d2:c1:06:28:60:c0:fe:d2:ea:28:55:72:c8:bb:ef:fa:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
        Validity
            Not Before: Mar 28 17:02:51 2025 GMT
            Not After : Mar 29 19:40:51 2025 GMT
        Subject: CN=CD0091756CC61FA9F9885A36A051D4D8AE790662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a3:6e:0f:13:d9:c7:6c:b7:f5:b4:df:79:7a:
                    e1:f8:87:d9:c8:91:6f:87:93:e8:01:64:b7:1a:f6:
                    32:28:df:43:00:5d:63:12:d2:cf:c2:d9:56:a0:37:
                    f9:47:cc:5c:26:07:bb:6c:21:96:61:e9:77:3e:a7:
                    40:0b:02:12:5f:17:fd:8b:8b:f9:73:c7:9f:13:48:
                    30:a1:e0:92:83:cd:56:20:1f:c4:33:cc:35:3f:1f:
                    00:bf:e6:30:a4:26:67:d1:f1:13:a2:23:92:1b:e0:
                    d8:b3:6c:b8:6a:5f:4a:79:73:7c:51:aa:44:83:c6:
                    8f:e5:69:08:38:b2:a6:c9:61:23:2f:71:8a:8d:c9:
                    19:3f:94:02:8a:59:ac:46:08:e6:2a:22:7f:1c:06:
                    40:e0:c9:d2:0d:19:2c:aa:db:90:9e:26:6a:39:9c:
                    6e:7b:27:10:5f:8f:84:9d:9d:aa:33:71:2e:96:7e:
                    30:9f:76:a5:59:10:66:6f:18:c0:b5:41:80:a0:92:
                    f9:91:c7:78:ec:23:35:81:4f:9f:5f:70:1b:9b:c2:
                    e3:95:de:7f:d3:02:36:c4:67:1b:9b:ba:b5:64:0a:
                    24:13:83:7a:8e:0a:ff:e0:49:76:c3:62:32:2e:8d:
                    f3:bc:e9:f7:0e:84:65:df:8a:40:c2:e0:dc:c5:3c:
                    f5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:00:91:75:6C:C6:1F:A9:F9:88:5A:36:A0:51:D4:D8:AE:79:06:62
            X509v3 Authority Key Identifier:
                keyid:9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:aa:dc:1b:15:da:00:af:59:60:76:9a:6f:1d:dd:a2:d4:15:
         8d:ff:f4:99:2b:71:3f:31:f5:bc:72:6e:5d:69:6a:c9:28:3b:
         10:94:ea:fb:c7:41:fe:62:a0:9b:ba:72:d0:8f:ab:f9:67:5a:
         1a:b3:26:66:90:d7:aa:a7:35:25:b8:0a:9f:43:c2:ff:87:13:
         ce:78:02:04:e3:fa:5f:8e:19:e8:00:16:04:fe:9f:5a:9b:59:
         45:00:7d:8b:37:16:93:ce:2e:51:65:28:0b:e5:91:4c:d3:9b:
         a4:d0:07:46:b9:bb:91:59:3b:db:d4:f5:15:08:c1:4b:c0:47:
         35:cf:6a:19:63:bb:99:84:ec:85:cf:7f:fe:ab:76:40:1c:2c:
         9c:98:f1:8f:61:3f:79:d9:50:7b:2f:3f:c2:bd:9f:21:d8:87:
         eb:b5:b8:68:10:6e:78:e7:c4:8e:fa:e0:ac:ed:04:63:77:de:
         88:58:24:8c:2a:8f:33:7f:ce:33:7c:d8:66:12:fa:7b:8d:77:
         5a:cc:99:7d:05:3d:fa:3f:ef:fd:64:ee:0c:4a:2f:07:eb:f1:
         cc:4f:31:ae:40:31:32:04:d5:54:f8:6e:83:6a:a2:ea:a8:0d:
         2c:f6:95:15:51:b3:14:7a:ba:fc:5d:06:d4:36:3d:7e:2b:1d:
         ac:08:76:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:58:57 2025 by rpki-client